it looks the actual problem is that crm does application using replace and in this case the data can be outdated after galera or rabbitmq ocf modification. thus we need to build 1.2.6 version of crmsh along with patch that set's minimum required version of pacemaker to be 1.1.10 to support cibadmin patch option.

instead of using live CIB:
1) create temporary shadow cib
2) run crm with this CIB and use configure load update
3) generate diff between live cib and this cib in corresponding scope:
a) "resources" for resources and groups
b) "constraints" for orders, locations and colocations
c) "rsc_defaults" for rsc_defaults
4) generate a patch using crm_diff
5) fix xml patch by appending <cib> and <configuration> tags
6) apply the patch by using cibadmin -P --xml-file
7) clean up everything